Hi...
We are trying to implement 802.1q in our environment.
We have been problems to setup 802.1q on switches.
We followed any CISCO documents about this but none sucess to implement
this.
The our environment:
- Cluster XL (two Secure Plataform machines);
- Each machine is connect in diferents CISCO switches (6509 and 6506
respectively);
- The CISCO switches have a TRUNK between them;
- The 802.1q are configured on each Secure Plataform.
Ex: Machine1 - eth1.400 - Vlan400 - 192.168.1.10
Machine2 - eth1.400 - Vlan400 - 192.168.1.11
To cluster object - virtual IP - 192.168.1.12
The configuration is finished to CheckPoint.
The configuration on switches are done, but something wrong is happening,
because we have not traffic to firewalls like ping.
With tcpdump, we can see in each machines (firewalls) that any packet are
incoming, but all traffic that we try to send out is tagging.
I would like to know with any on has done this. Any on has the commands
sequency to implement on switches.
I think that we are doing something wrong on switches configurations.
PS: I try to draw the picture bellow. Maybe help to understand what we are
trying to do.
CLUSTER XL
/----------------------------\
| FW1 |
/-----------\vlan700 | eth1.700 ///// |
| 6509 f0/37|----------------------/////--\ |
\-----------/802.1q | vlan700 ///// | |
T|| | 802.1q | |
R|| | | |
U|| | |HeatBeat|
N|| | | |
K|| | FW1 | |
/-----------\vlan700 | eth1.700 ///// | |
| 6506 f0/37|----------------------/////--/ |
\-----------/802.1q | vlan700 ///// |
| 802.1q |
\----------------------------/
Thanks and regards,
Cassio David Pereira
Analista de Seguran�a da Informa��o
Tecnologia de Sistemas Centralizados
________________________________________
EDINFOR Solu��es Inform�ticas Ltda
Av. Presidente Castelo Branco, 77
Cesar Souza - Mogi das Cruzes
CEP 08820-460 - S�o Paulo - SP
Tel: +55 11 2131-8872/2131-8800 - Fax: 2131-8840
http://www.edinfor.com.br/
[EMAIL PROTECTED]
"Concentre-se no seu neg�cio, deixe a inform�tica conosco"
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
